Threat Protection Administrator

Insight Global is seeking a Threat Protection Administrator for a leading cybersecurity-focused client. This role sits at the intersection of network and security operations, acting as a critical liaison to ensure threat detection and mitigation strategies are effectively executed. The ideal candidate will bring hands-on expertise with Fortinet technologies and a strong understanding of firewall policy management, logging, and incident response. This individual will work closely with SOC and network engineering teams to tune threat protection systems, improve visibility, and strengthen overall security posture. Candidates with experience in manufacturing or OT environments and a proactive, analytical approach to cybersecurity will stand out.

• Administer and audit Fortinet Security Fabric tools and firewall configurations
• Tune and manage threat protection (IPS, AV, Anti-Bot, Web Filtering, SSL inspection)
• Monitor alerts/logs via FortiAnalyzer and SIEM tools
• Triage incidents and escalate confirmed threats
• Act as a liaison between network and security teams
• Support SOC with incident response and ensure proper network mitigation actions
• Deploy and manage configurations via FortiManager
• Maintain dashboards, reporting, and compliance tracking
• Optimize firewall policies and threat detection based on evolving risks
• Support VPNs, segmentation, and secure architecture reviews
• Ensure proper data flow (DNS, traffic logs, etc.) into security systems for accurate detection

• Hands-on experience administering FortiGate firewalls

• Strong understanding of: o Network security (firewalls, NAT, VPNs) o Threat protection tools (IPS, Antivirus, Web Filtering, sandboxing) o Security logging and alert analysis

• Experience with FortiManager and/or FortiAnalyzer
• Background working in SOC/SIEM environments
• Ability to audit firewall rules and identify misconfigurations or policy gaps
• Experience with incident triage and escalation

Nice to Have Skills & Experience

• Fortinet certifications (NSE 4-level competency required; NSE 5/6/7 preferred)
• Additional certifications (CISSP, Security+, CCNA Security, GIAC)
• Experience securing OT/ICS (manufacturing/smart factory) environments
• SIEM/log correlation experience
• Scripting/automation (Python, APIs, Ansible)
• Knowledge of Zero Trust (ZTNA) and microsegmentation
• Exposure to DNS monitoring, content filtering, and network telemetry feeding security systems

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.